@lark-apaas/fullstack-nestjs-core 1.1.34-alpha.64 → 1.1.34-alpha.66

package/dist/index.cjs

@@ -34423,12 +34423,13 @@ __export(index_exports, {
   UserContextMiddleware: () => UserContextMiddleware,
   ViewContextMiddleware: () => ViewContextMiddleware,
   configureApp: () => configureApp,
-  createLegacyPathRedirectMiddleware: () => createLegacyPathRedirectMiddleware
+  createLegacyPathRedirectMiddleware: () => createLegacyPathRedirectMiddleware,
+  registerOpenApiSpecEndpoint: () => registerOpenApiSpecEndpoint
 });
 module.exports = __toCommonJS(index_exports);
 
 // src/modules/platform/module.ts
-var import_common16 = require("@nestjs/common");
+var import_common17 = require("@nestjs/common");
 var import_core2 = require("@nestjs/core");
 var import_nestjs_common6 = require("@lark-apaas/nestjs-common");
 var import_config2 = require("@nestjs/config");
@@ -34627,32 +34628,31 @@ var ViewContextMiddleware = class _ViewContextMiddleware {
   constructor(client) {
     this.client = client;
   }
-  async getAppPublished(appId) {
+  async getAppInfo(appId) {
     if (!appId) {
-      this.logger.warn(`appId is empty, skip get app published`);
+      this.logger.warn(`appId is empty, skip get app info`);
       return null;
     }
     try {
       const resp = await this.client.get(`/b/${appId}/get_published_v2`);
       if (resp.status !== 200) {
-        throw new Error(`Failed to get app published, status: ${resp.status}`);
+        throw new Error(`Failed to get app info, status: ${resp.status}`);
       }
       const data = await resp.json();
       if (data.status_code !== "0") {
-        throw new Error(`Failed to get app published, status_code: ${data.status_code}`);
+        throw new Error(`Failed to get app info, status_code: ${data.status_code}`);
       }
-      return data.data ?? null;
+      return data.data.app_info ?? {};
     } catch (err) {
-      this.logger.error(err, "Failed to get app published");
+      this.logger.error(err, "Failed to get app info");
       return null;
     }
   }
   async use(req, res, next) {
     const { userId, tenantId, appId, loginUrl, userType } = req.userContext;
     const csrfToken = req.csrfToken;
+    const appInfo = await this.getAppInfo(appId);
     const environment = mapToWindowEnvironment(process.env.FORCE_FRAMEWORK_ENVIRONMENT);
-    const appPublishedData = await this.getAppPublished(appId);
-    const appInfo = appPublishedData?.app_info ?? null;
     req.__platform_data__ = {
       csrfToken: csrfToken ?? "",
       userId: userId ?? "",
@@ -34663,9 +34663,7 @@ var ViewContextMiddleware = class _ViewContextMiddleware {
       loginUrl: loginUrl ?? "",
       userType: userType ?? "",
       tenantId,
-      environment,
-      showBadge: appInfo?.show_badge !== false,
-      appPublished: appPublishedData ?? null
+      environment
     };
     res.locals = {
       ...res.locals ?? {},
@@ -34776,18 +34774,24 @@ function createApiNotFoundResponse(req) {
   };
 }
 __name(createApiNotFoundResponse, "createApiNotFoundResponse");
-function getApiPathPrefix() {
+function getApiPathPrefixes() {
   const globalPrefix = process.env.CLIENT_BASE_PATH ?? "";
   if (!globalPrefix) {
-    return "/api/";
+    return [
+      "/api/",
+      "/openapi/"
+    ];
   }
   const normalizedPrefix = globalPrefix.replace(/\/+$/, "");
-  return `${normalizedPrefix}/api/`;
+  return [
+    `${normalizedPrefix}/api/`,
+    `${normalizedPrefix}/openapi/`
+  ];
 }
-__name(getApiPathPrefix, "getApiPathPrefix");
+__name(getApiPathPrefixes, "getApiPathPrefixes");
 function apiResponseInterceptor(req, res, next) {
-  const apiPrefix = getApiPathPrefix();
-  if (!req.baseUrl.startsWith(apiPrefix)) {
+  const apiPrefixes = getApiPathPrefixes();
+  if (!apiPrefixes.some((prefix) => req.baseUrl.startsWith(prefix))) {
     return next();
   }
   res.render = function() {
@@ -35017,10 +35021,9 @@ FrameworkDebugMiddleware = _ts_decorate7([
   ])
 ], FrameworkDebugMiddleware);
 
-// src/services/platform-http-client.service.ts
+// src/middlewares/openapi-spec/index.ts
+var import_swagger = require("@nestjs/swagger");
 var import_common8 = require("@nestjs/common");
-var import_http_client = require("@lark-apaas/http-client");
-var import_nestjs_common3 = require("@lark-apaas/nestjs-common");
 function _ts_decorate8(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
@@ -35028,6 +35031,131 @@ function _ts_decorate8(decorators, target, key, desc) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 __name(_ts_decorate8, "_ts_decorate");
+var _app = null;
+var _cachedSpec = null;
+function registerOpenApiSpecEndpoint(app) {
+  const globalPrefix = (process.env.CLIENT_BASE_PATH ?? "").replace(/\/+$/, "");
+  _app = app;
+  console.log(`[OpenAPI] Registered GET ${globalPrefix}/api/__framework__/openapi-spec`);
+}
+__name(registerOpenApiSpecEndpoint, "registerOpenApiSpecEndpoint");
+var OpenApiSpecMiddleware = class {
+  static {
+    __name(this, "OpenApiSpecMiddleware");
+  }
+  use(_req, res, next) {
+    if (!_app) {
+      next();
+      return;
+    }
+    try {
+      if (!_cachedSpec) {
+        const globalPrefix = (process.env.CLIENT_BASE_PATH ?? "").replace(/\/+$/, "");
+        const config = new import_swagger.DocumentBuilder().setTitle("OpenAPI Spec").setVersion("1.0").build();
+        const spec = import_swagger.SwaggerModule.createDocument(_app, config);
+        _cachedSpec = buildFilteredSpec(spec, globalPrefix);
+      }
+      res.json(_cachedSpec);
+    } catch (err) {
+      console.error("[openapi-spec] Failed to generate spec:", err);
+      res.json({
+        openapi: "3.0.0",
+        paths: {},
+        components: {
+          schemas: {}
+        }
+      });
+    }
+  }
+};
+OpenApiSpecMiddleware = _ts_decorate8([
+  (0, import_common8.Injectable)()
+], OpenApiSpecMiddleware);
+function buildFilteredSpec(spec, globalPrefix) {
+  const schemas = spec.components?.schemas ?? {};
+  const paths = spec.paths ?? {};
+  const filteredPaths = {};
+  for (const [pathKey, methods] of Object.entries(paths)) {
+    const cleanPath = stripPrefix(pathKey, globalPrefix);
+    if (!cleanPath.startsWith("/openapi")) continue;
+    filteredPaths[cleanPath] = {};
+    for (const [method, operation] of Object.entries(methods)) {
+      if ([
+        "parameters",
+        "summary",
+        "description",
+        "servers"
+      ].includes(method)) continue;
+      filteredPaths[cleanPath][method] = resolveRefsDeep(structuredClone(operation), schemas);
+    }
+  }
+  return {
+    openapi: spec.openapi,
+    paths: filteredPaths,
+    components: {
+      schemas: resolveAllSchemaRefs(structuredClone(schemas))
+    }
+  };
+}
+__name(buildFilteredSpec, "buildFilteredSpec");
+function stripPrefix(path2, prefix) {
+  if (prefix && path2.startsWith(prefix)) {
+    return path2.slice(prefix.length);
+  }
+  return path2;
+}
+__name(stripPrefix, "stripPrefix");
+var MAX_REF_DEPTH = 5;
+function resolveRefsDeep(obj, schemas, depth = 0) {
+  if (depth > MAX_REF_DEPTH || obj === null || obj === void 0) return obj;
+  if (typeof obj !== "object") return obj;
+  if (Array.isArray(obj)) {
+    return obj.map((item) => resolveRefsDeep(item, schemas, depth));
+  }
+  const record = obj;
+  if (typeof record["$ref"] === "string") {
+    const resolved = resolveRef(record["$ref"], schemas);
+    if (resolved !== void 0) {
+      return resolveRefsDeep(structuredClone(resolved), schemas, depth + 1);
+    }
+    return record;
+  }
+  const result = {};
+  for (const [key, value] of Object.entries(record)) {
+    result[key] = resolveRefsDeep(value, schemas, depth);
+  }
+  return result;
+}
+__name(resolveRefsDeep, "resolveRefsDeep");
+function resolveRef(ref, schemas) {
+  const prefix = "#/components/schemas/";
+  if (ref.startsWith(prefix)) {
+    const name = ref.slice(prefix.length);
+    return schemas[name];
+  }
+  return void 0;
+}
+__name(resolveRef, "resolveRef");
+function resolveAllSchemaRefs(schemas) {
+  const result = {};
+  for (const [name, schema] of Object.entries(schemas)) {
+    result[name] = resolveRefsDeep(schema, schemas);
+  }
+  return result;
+}
+__name(resolveAllSchemaRefs, "resolveAllSchemaRefs");
+
+// src/services/platform-http-client.service.ts
+var import_common9 = require("@nestjs/common");
+var import_http_client = require("@lark-apaas/http-client");
+var import_nestjs_common3 = require("@lark-apaas/nestjs-common");
+function _ts_decorate9(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate9, "_ts_decorate");
 function _ts_metadata5(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
@@ -35066,7 +35194,7 @@ var PlatformHttpClientService = class _PlatformHttpClientService {
   requestContext;
   client;
   protectedClient;
-  logger = new import_common8.Logger(_PlatformHttpClientService.name);
+  logger = new import_common9.Logger(_PlatformHttpClientService.name);
   constructor(requestContext) {
     this.requestContext = requestContext;
     const baseConfig = {
@@ -35222,8 +35350,8 @@ var PlatformHttpClientService = class _PlatformHttpClientService {
     });
   }
 };
-PlatformHttpClientService = _ts_decorate8([
-  (0, import_common8.Injectable)(),
+PlatformHttpClientService = _ts_decorate9([
+  (0, import_common9.Injectable)(),
   _ts_metadata5("design:type", Function),
   _ts_metadata5("design:paramtypes", [
     typeof import_nestjs_common3.RequestContextService === "undefined" ? Object : import_nestjs_common3.RequestContextService
@@ -35234,16 +35362,16 @@ PlatformHttpClientService = _ts_decorate8([
 var DISABLE_DATAPASS = process.env.FORCE_FRAMEWORK_DISABLE_DATAPASS === "true";
 
 // src/services/file.service.ts
-var import_common9 = require("@nestjs/common");
+var import_common10 = require("@nestjs/common");
 var import_nestjs_common4 = require("@lark-apaas/nestjs-common");
 var import_file_service = require("@lark-apaas/file-service");
-function _ts_decorate9(decorators, target, key, desc) {
+function _ts_decorate10(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate9, "_ts_decorate");
+__name(_ts_decorate10, "_ts_decorate");
 function _ts_metadata6(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
@@ -35268,7 +35396,7 @@ var FileService = class {
     this.httpClient = httpClient;
     this.observable = observable;
     this.fileServiceCore = new import_file_service.FileService(this.httpClient);
-    this.nestLogger = new import_common9.Logger("file");
+    this.nestLogger = new import_common10.Logger("file");
   }
   /**
    * 返回一个绑定了指定 bucket 的代理对象
@@ -35608,10 +35736,10 @@ var FileService = class {
     }
   }
 };
-FileService = _ts_decorate9([
-  (0, import_common9.Injectable)(),
-  _ts_param2(1, (0, import_common9.Inject)(import_nestjs_common4.PLATFORM_HTTP_CLIENT)),
-  _ts_param2(2, (0, import_common9.Inject)(import_nestjs_common4.OBSERVABLE_SERVICE)),
+FileService = _ts_decorate10([
+  (0, import_common10.Injectable)(),
+  _ts_param2(1, (0, import_common10.Inject)(import_nestjs_common4.PLATFORM_HTTP_CLIENT)),
+  _ts_param2(2, (0, import_common10.Inject)(import_nestjs_common4.OBSERVABLE_SERVICE)),
   _ts_metadata6("design:type", Function),
   _ts_metadata6("design:paramtypes", [
     typeof import_nestjs_common4.RequestContextService === "undefined" ? Object : import_nestjs_common4.RequestContextService,
@@ -35624,21 +35752,21 @@ FileService = _ts_decorate9([
 var import_nestjs_authzpaas = require("@lark-apaas/nestjs-authzpaas");
 
 // src/modules/static/static.module.ts
-var import_common11 = require("@nestjs/common");
+var import_common12 = require("@nestjs/common");
 
 // src/modules/static/static.controller.ts
-var import_common10 = require("@nestjs/common");
-var import_swagger = require("@nestjs/swagger");
+var import_common11 = require("@nestjs/common");
+var import_swagger2 = require("@nestjs/swagger");
 var fs = __toESM(require("fs"), 1);
 var path = __toESM(require("path"), 1);
 var crypto2 = __toESM(require("crypto"), 1);
-function _ts_decorate10(decorators, target, key, desc) {
+function _ts_decorate11(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate10, "_ts_decorate");
+__name(_ts_decorate11, "_ts_decorate");
 function _ts_metadata7(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
@@ -35706,7 +35834,7 @@ var StaticController = class _StaticController {
   static {
     __name(this, "StaticController");
   }
-  logger = new import_common10.Logger(_StaticController.name);
+  logger = new import_common11.Logger(_StaticController.name);
   staticDir;
   constructor() {
     this.staticDir = path.resolve(process.cwd(), "shared/static");
@@ -35727,7 +35855,7 @@ var StaticController = class _StaticController {
     try {
       const relativePath = params["0"] || params["*"] || "";
       if (!relativePath) {
-        res.status(import_common10.HttpStatus.BAD_REQUEST).json({
+        res.status(import_common11.HttpStatus.BAD_REQUEST).json({
           error: "Bad Request",
           message: "File path is required"
         });
@@ -35737,14 +35865,14 @@ var StaticController = class _StaticController {
       const normalizedPath = path.normalize(filePath);
       if (!normalizedPath.startsWith(this.staticDir)) {
         this.logger.warn(`Path traversal attempt detected: ${relativePath}`);
-        res.status(import_common10.HttpStatus.FORBIDDEN).json({
+        res.status(import_common11.HttpStatus.FORBIDDEN).json({
           error: "Forbidden",
           message: "Access denied"
         });
         return;
       }
       if (!fs.existsSync(normalizedPath)) {
-        res.status(import_common10.HttpStatus.NOT_FOUND).json({
+        res.status(import_common11.HttpStatus.NOT_FOUND).json({
           error: "Not Found",
           message: "File not found"
         });
@@ -35752,7 +35880,7 @@ var StaticController = class _StaticController {
       }
       const stat = fs.statSync(normalizedPath);
       if (stat.isDirectory()) {
-        res.status(import_common10.HttpStatus.FORBIDDEN).json({
+        res.status(import_common11.HttpStatus.FORBIDDEN).json({
           error: "Forbidden",
           message: "Directory listing not allowed"
         });
@@ -35762,7 +35890,7 @@ var StaticController = class _StaticController {
       const etag = generateETag(stat);
       const ifNoneMatch = req.headers["if-none-match"];
       if (ifNoneMatch === etag) {
-        res.status(import_common10.HttpStatus.NOT_MODIFIED).end();
+        res.status(import_common11.HttpStatus.NOT_MODIFIED).end();
         return;
       }
       res.setHeader("Content-Type", mimeType);
@@ -35773,7 +35901,7 @@ var StaticController = class _StaticController {
       stream.on("error", (error) => {
         this.logger.error(`Error streaming file: ${relativePath}`, error);
         if (!res.headersSent) {
-          res.status(import_common10.HttpStatus.INTERNAL_SERVER_ERROR).json({
+          res.status(import_common11.HttpStatus.INTERNAL_SERVER_ERROR).json({
             error: "Internal Server Error",
             message: "Failed to read file"
           });
@@ -35783,7 +35911,7 @@ var StaticController = class _StaticController {
     } catch (error) {
       this.logger.error("Error serving static file", error);
       if (!res.headersSent) {
-        res.status(import_common10.HttpStatus.INTERNAL_SERVER_ERROR).json({
+        res.status(import_common11.HttpStatus.INTERNAL_SERVER_ERROR).json({
           error: "Internal Server Error",
           message: "An unexpected error occurred"
         });
@@ -35791,11 +35919,11 @@ var StaticController = class _StaticController {
     }
   }
 };
-_ts_decorate10([
-  (0, import_common10.Get)("*"),
-  _ts_param3(0, (0, import_common10.Param)()),
-  _ts_param3(1, (0, import_common10.Req)()),
-  _ts_param3(2, (0, import_common10.Res)()),
+_ts_decorate11([
+  (0, import_common11.Get)("*"),
+  _ts_param3(0, (0, import_common11.Param)()),
+  _ts_param3(1, (0, import_common11.Req)()),
+  _ts_param3(2, (0, import_common11.Res)()),
   _ts_metadata7("design:type", Function),
   _ts_metadata7("design:paramtypes", [
     typeof Record === "undefined" ? Object : Record,
@@ -35804,28 +35932,28 @@ _ts_decorate10([
   ]),
   _ts_metadata7("design:returntype", void 0)
 ], StaticController.prototype, "serveFile", null);
-StaticController = _ts_decorate10([
-  (0, import_swagger.ApiExcludeController)(),
-  (0, import_common10.Controller)("static"),
+StaticController = _ts_decorate11([
+  (0, import_swagger2.ApiExcludeController)(),
+  (0, import_common11.Controller)("static"),
   _ts_metadata7("design:type", Function),
   _ts_metadata7("design:paramtypes", [])
 ], StaticController);
 
 // src/modules/static/static.module.ts
-function _ts_decorate11(decorators, target, key, desc) {
+function _ts_decorate12(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate11, "_ts_decorate");
+__name(_ts_decorate12, "_ts_decorate");
 var StaticModule = class {
   static {
     __name(this, "StaticModule");
   }
 };
-StaticModule = _ts_decorate11([
-  (0, import_common11.Module)({
+StaticModule = _ts_decorate12([
+  (0, import_common12.Module)({
     controllers: [
       StaticController
     ]
@@ -35833,14 +35961,14 @@ StaticModule = _ts_decorate11([
 ], StaticModule);
 
 // src/modules/html-hot-update/html-hot-update.module.ts
-var import_common14 = require("@nestjs/common");
+var import_common15 = require("@nestjs/common");
 
 // src/modules/html-hot-update/html-hot-update.controller.ts
-var import_common13 = require("@nestjs/common");
-var import_swagger2 = require("@nestjs/swagger");
+var import_common14 = require("@nestjs/common");
+var import_swagger3 = require("@nestjs/swagger");
 
 // src/modules/html-hot-update/html-hot-update.service.ts
-var import_common12 = require("@nestjs/common");
+var import_common13 = require("@nestjs/common");
 var import_node_fs = require("fs");
 var import_node_fs2 = require("fs");
 var import_node_crypto = require("crypto");
@@ -35873,13 +36001,13 @@ function setActiveHtmlVersion(version) {
 __name(setActiveHtmlVersion, "setActiveHtmlVersion");
 
 // src/modules/html-hot-update/html-hot-update.service.ts
-function _ts_decorate12(decorators, target, key, desc) {
+function _ts_decorate13(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate12, "_ts_decorate");
+__name(_ts_decorate13, "_ts_decorate");
 function _ts_metadata8(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
@@ -35922,7 +36050,7 @@ var HtmlHotUpdateService = class _HtmlHotUpdateService {
     __name(this, "HtmlHotUpdateService");
   }
   httpClient;
-  logger = new import_common12.Logger(_HtmlHotUpdateService.name);
+  logger = new import_common13.Logger(_HtmlHotUpdateService.name);
   fileLock = new Mutex();
   hotUpdateDir = getHotUpdateHtmlDir();
   hotUpdateVersionsDir = getHotUpdateVersionsDir();
@@ -36124,9 +36252,9 @@ var HtmlHotUpdateService = class _HtmlHotUpdateService {
     return "";
   }
 };
-HtmlHotUpdateService = _ts_decorate12([
-  (0, import_common12.Injectable)(),
-  _ts_param4(0, (0, import_common12.Inject)(import_nestjs_common5.PLATFORM_HTTP_CLIENT)),
+HtmlHotUpdateService = _ts_decorate13([
+  (0, import_common13.Injectable)(),
+  _ts_param4(0, (0, import_common13.Inject)(import_nestjs_common5.PLATFORM_HTTP_CLIENT)),
   _ts_metadata8("design:type", Function),
   _ts_metadata8("design:paramtypes", [
     typeof PlatformHttpClient === "undefined" ? Object : PlatformHttpClient
@@ -36134,13 +36262,13 @@ HtmlHotUpdateService = _ts_decorate12([
 ], HtmlHotUpdateService);
 
 // src/modules/html-hot-update/html-hot-update.controller.ts
-function _ts_decorate13(decorators, target, key, desc) {
+function _ts_decorate14(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate13, "_ts_decorate");
+__name(_ts_decorate14, "_ts_decorate");
 function _ts_metadata9(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
@@ -36163,7 +36291,7 @@ var HtmlHotUpdateController = class _HtmlHotUpdateController {
     __name(this, "HtmlHotUpdateController");
   }
   htmlHotUpdateService;
-  logger = new import_common13.Logger(_HtmlHotUpdateController.name);
+  logger = new import_common14.Logger(_HtmlHotUpdateController.name);
   constructor(htmlHotUpdateService) {
     this.htmlHotUpdateService = htmlHotUpdateService;
   }
@@ -36205,19 +36333,19 @@ var HtmlHotUpdateController = class _HtmlHotUpdateController {
     }
   }
 };
-_ts_decorate13([
-  (0, import_common13.Post)("update_html_files"),
-  (0, import_common13.HttpCode)(import_common13.HttpStatus.OK),
-  _ts_param5(0, (0, import_common13.Body)()),
+_ts_decorate14([
+  (0, import_common14.Post)("update_html_files"),
+  (0, import_common14.HttpCode)(import_common14.HttpStatus.OK),
+  _ts_param5(0, (0, import_common14.Body)()),
   _ts_metadata9("design:type", Function),
   _ts_metadata9("design:paramtypes", [
     typeof UpdateHtmlFilesDto === "undefined" ? Object : UpdateHtmlFilesDto
   ]),
   _ts_metadata9("design:returntype", Promise)
 ], HtmlHotUpdateController.prototype, "updateHtmlFiles", null);
-HtmlHotUpdateController = _ts_decorate13([
-  (0, import_swagger2.ApiExcludeController)(),
-  (0, import_common13.Controller)("__innerapi__"),
+HtmlHotUpdateController = _ts_decorate14([
+  (0, import_swagger3.ApiExcludeController)(),
+  (0, import_common14.Controller)("__innerapi__"),
   _ts_metadata9("design:type", Function),
   _ts_metadata9("design:paramtypes", [
     typeof HtmlHotUpdateService === "undefined" ? Object : HtmlHotUpdateService
@@ -36225,20 +36353,20 @@ HtmlHotUpdateController = _ts_decorate13([
 ], HtmlHotUpdateController);
 
 // src/modules/html-hot-update/html-hot-update.module.ts
-function _ts_decorate14(decorators, target, key, desc) {
+function _ts_decorate15(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate14, "_ts_decorate");
+__name(_ts_decorate15, "_ts_decorate");
 var HtmlHotUpdateModule = class {
   static {
     __name(this, "HtmlHotUpdateModule");
   }
 };
-HtmlHotUpdateModule = _ts_decorate14([
-  (0, import_common14.Module)({
+HtmlHotUpdateModule = _ts_decorate15([
+  (0, import_common15.Module)({
     controllers: [
       HtmlHotUpdateController
     ],
@@ -36252,16 +36380,16 @@ HtmlHotUpdateModule = _ts_decorate14([
 ], HtmlHotUpdateModule);
 
 // src/middlewares/html-hot-update-view/index.ts
-var import_common15 = require("@nestjs/common");
+var import_common16 = require("@nestjs/common");
 var import_node_fs3 = require("fs");
 var import_node_path3 = require("path");
-function _ts_decorate15(decorators, target, key, desc) {
+function _ts_decorate16(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate15, "_ts_decorate");
+__name(_ts_decorate16, "_ts_decorate");
 var HtmlHotUpdateViewMiddleware = class {
   static {
     __name(this, "HtmlHotUpdateViewMiddleware");
@@ -36288,18 +36416,18 @@ var HtmlHotUpdateViewMiddleware = class {
     next();
   }
 };
-HtmlHotUpdateViewMiddleware = _ts_decorate15([
-  (0, import_common15.Injectable)()
+HtmlHotUpdateViewMiddleware = _ts_decorate16([
+  (0, import_common16.Injectable)()
 ], HtmlHotUpdateViewMiddleware);
 
 // src/modules/platform/module.ts
-function _ts_decorate16(decorators, target, key, desc) {
+function _ts_decorate17(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate16, "_ts_decorate");
+__name(_ts_decorate17, "_ts_decorate");
 var PLATFORM_MODULE_OPTIONS = /* @__PURE__ */ Symbol("PLATFORM_MODULE_OPTIONS");
 var PlatformModule = class _PlatformModule {
   static {
@@ -36387,7 +36515,7 @@ var PlatformModule = class _PlatformModule {
         },
         {
           provide: import_core2.APP_PIPE,
-          useValue: new import_common16.ValidationPipe({
+          useValue: new import_common17.ValidationPipe({
             transform: true,
             transformOptions: {
               enableImplicitConversion: true
@@ -36440,16 +36568,21 @@ var PlatformModule = class _PlatformModule {
   */
   configure(consumer) {
     const options = _PlatformModule.moduleOptions;
-    consumer.apply(apiResponseInterceptor).forRoutes("/api/*");
+    consumer.apply(apiResponseInterceptor).forRoutes("/api/*", "/openapi/*");
     if (process.env.NODE_ENV === "development") {
       consumer.apply(FrameworkDebugMiddleware).forRoutes("/api/__framework__/debug");
     }
+    if (process.env.NODE_ENV !== "production") {
+      consumer.apply(OpenApiSpecMiddleware).forRoutes("/api/__framework__/openapi-spec");
+    }
     consumer.apply(UserContextMiddleware, RequestContextMiddleware, import_nestjs_logger2.LoggerContextMiddleware, import_nestjs_observable.ObservableTraceMiddleware, ...DISABLE_DATAPASS ? [] : [
       import_nestjs_datapaas.SqlExecutionContextMiddleware
     ]).forRoutes("/*");
-    consumer.apply(CsrfTokenMiddleware, ViewContextMiddleware, HtmlHotUpdateViewMiddleware).exclude("/api/(.*)", "/static/(.*)").forRoutes("*");
+    consumer.apply(CsrfTokenMiddleware, ViewContextMiddleware, HtmlHotUpdateViewMiddleware).exclude("/api/(.*)", "/openapi/(.*)", "/static/(.*)").forRoutes("*");
     if (options.enableCsrf !== false) {
-      const csrfRoutes = options.csrfRoutes || "/api/*";
+      const csrfRoutes = options.csrfRoutes || [
+        "/api/*"
+      ];
       if (Array.isArray(csrfRoutes)) {
         csrfRoutes.forEach((route) => {
           consumer.apply(CsrfMiddleware).forRoutes(route);
@@ -36460,9 +36593,9 @@ var PlatformModule = class _PlatformModule {
     }
   }
 };
-PlatformModule = _ts_decorate16([
-  (0, import_common16.Global)(),
-  (0, import_common16.Module)({})
+PlatformModule = _ts_decorate17([
+  (0, import_common17.Global)(),
+  (0, import_common17.Module)({})
 ], PlatformModule);
 
 // src/setup.ts
@@ -36538,6 +36671,9 @@ async function configureApp(app, perms = defaultPerms) {
       console.error("[OpenAPI] OpenAPI \u751F\u6210\u5931\u8D25:", err);
     }
   }
+  if (process.env.NODE_ENV !== "production") {
+    registerOpenApiSpecEndpoint(app);
+  }
   console.log("App Started Successfully.");
 }
 __name(configureApp, "configureApp");
@@ -36574,6 +36710,7 @@ var import_nestjs_authzpaas2 = require("@lark-apaas/nestjs-authzpaas");
   ViewContextMiddleware,
   configureApp,
   createLegacyPathRedirectMiddleware,
+  registerOpenApiSpecEndpoint,
   ...require("@lark-apaas/nestjs-authnpaas"),
   ...require("@lark-apaas/nestjs-capability"),
   ...require("@lark-apaas/nestjs-datapaas"),

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { NestModule, DynamicModule, MiddlewareConsumer, OnModuleInit, NestMiddleware } from '@nestjs/common';
+import { NestModule, DynamicModule, MiddlewareConsumer, OnModuleInit, NestMiddleware, INestApplication } from '@nestjs/common';
 import { HttpClientConfig, PlatformPluginOptions, HttpClient } from '@lark-apaas/http-client';
 import { AuthZPaasModuleOptions } from '@lark-apaas/nestjs-authzpaas';
 export { AddMembersParams, AuthZPaasModule, AuthorizationSDK, Can, CanRole, ChatSimpleDTO, CommonParam, CreateRoleParams, CreateRoleResponse, DepartmentDTO, DepartmentEntity, DepartmentSimpleDTO, FilterParams, ForceRoleDTO, I18nText, IPermissionResolver, ListMembersParams, ListMembersResponse, ListRolesParams, MemberMutationData, MemberType, PERMISSION_RESOLVER_TOKEN, PermissionPoint, PermissionRequirement, PresetGroupDTO, RemoveMembersParams, RoleMemberDTO, SearchChatEntity, SearchParams, SearchResponse, SearchResult, SearchUserEntity, UpdateRoleParams, UserSimpleDTO } from '@lark-apaas/nestjs-authzpaas';
@@ -201,7 +201,7 @@ declare class ViewContextMiddleware implements NestMiddleware {
     private readonly client;
     private readonly logger;
     constructor(client: PlatformHttpClient);
-    private getAppPublished;
+    private getAppInfo;
     use(req: Request, res: Response, next: NextFunction): Promise<void>;
 }
 
@@ -221,6 +221,12 @@ declare class ViewContextMiddleware implements NestMiddleware {
  */
 declare function createLegacyPathRedirectMiddleware(): (req: Request, res: Response, next: NextFunction) => void;
 
+/**
+ * 保存 app 引用，供 OpenApiSpecMiddleware 懒加载生成 spec。
+ * 在 configureApp() 中调用（非生产环境）。
+ */
+declare function registerOpenApiSpecEndpoint(app: INestApplication): void;
+
 /**
  * API 404 响应格式
  */
@@ -401,4 +407,4 @@ declare class PlatformHttpClientService {
     private registerInterceptorsForClient;
 }
 
-export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware };
+export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware, registerOpenApiSpecEndpoint };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { NestModule, DynamicModule, MiddlewareConsumer, OnModuleInit, NestMiddleware } from '@nestjs/common';
+import { NestModule, DynamicModule, MiddlewareConsumer, OnModuleInit, NestMiddleware, INestApplication } from '@nestjs/common';
 import { HttpClientConfig, PlatformPluginOptions, HttpClient } from '@lark-apaas/http-client';
 import { AuthZPaasModuleOptions } from '@lark-apaas/nestjs-authzpaas';
 export { AddMembersParams, AuthZPaasModule, AuthorizationSDK, Can, CanRole, ChatSimpleDTO, CommonParam, CreateRoleParams, CreateRoleResponse, DepartmentDTO, DepartmentEntity, DepartmentSimpleDTO, FilterParams, ForceRoleDTO, I18nText, IPermissionResolver, ListMembersParams, ListMembersResponse, ListRolesParams, MemberMutationData, MemberType, PERMISSION_RESOLVER_TOKEN, PermissionPoint, PermissionRequirement, PresetGroupDTO, RemoveMembersParams, RoleMemberDTO, SearchChatEntity, SearchParams, SearchResponse, SearchResult, SearchUserEntity, UpdateRoleParams, UserSimpleDTO } from '@lark-apaas/nestjs-authzpaas';
@@ -201,7 +201,7 @@ declare class ViewContextMiddleware implements NestMiddleware {
     private readonly client;
     private readonly logger;
     constructor(client: PlatformHttpClient);
-    private getAppPublished;
+    private getAppInfo;
     use(req: Request, res: Response, next: NextFunction): Promise<void>;
 }
 
@@ -221,6 +221,12 @@ declare class ViewContextMiddleware implements NestMiddleware {
  */
 declare function createLegacyPathRedirectMiddleware(): (req: Request, res: Response, next: NextFunction) => void;
 
+/**
+ * 保存 app 引用，供 OpenApiSpecMiddleware 懒加载生成 spec。
+ * 在 configureApp() 中调用（非生产环境）。
+ */
+declare function registerOpenApiSpecEndpoint(app: INestApplication): void;
+
 /**
  * API 404 响应格式
  */
@@ -401,4 +407,4 @@ declare class PlatformHttpClientService {
     private registerInterceptorsForClient;
 }
 
-export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware };
+export { type ApiNotFoundResponse, CsrfMiddleware, CsrfTokenMiddleware, FileService, HtmlHotUpdateModule, HtmlHotUpdateService, type PlatformHttpClientOptions, PlatformHttpClientService, PlatformModule, type PlatformModuleOptions, StaticModule, UserContextMiddleware, ViewContextMiddleware, configureApp, createLegacyPathRedirectMiddleware, registerOpenApiSpecEndpoint };

package/dist/index.js

@@ -34600,32 +34600,31 @@ var ViewContextMiddleware = class _ViewContextMiddleware {
   constructor(client) {
     this.client = client;
   }
-  async getAppPublished(appId) {
+  async getAppInfo(appId) {
     if (!appId) {
-      this.logger.warn(`appId is empty, skip get app published`);
+      this.logger.warn(`appId is empty, skip get app info`);
       return null;
     }
     try {
       const resp = await this.client.get(`/b/${appId}/get_published_v2`);
       if (resp.status !== 200) {
-        throw new Error(`Failed to get app published, status: ${resp.status}`);
+        throw new Error(`Failed to get app info, status: ${resp.status}`);
       }
       const data = await resp.json();
       if (data.status_code !== "0") {
-        throw new Error(`Failed to get app published, status_code: ${data.status_code}`);
+        throw new Error(`Failed to get app info, status_code: ${data.status_code}`);
       }
-      return data.data ?? null;
+      return data.data.app_info ?? {};
     } catch (err) {
-      this.logger.error(err, "Failed to get app published");
+      this.logger.error(err, "Failed to get app info");
       return null;
     }
   }
   async use(req, res, next) {
     const { userId, tenantId, appId, loginUrl, userType } = req.userContext;
     const csrfToken = req.csrfToken;
+    const appInfo = await this.getAppInfo(appId);
     const environment = mapToWindowEnvironment(process.env.FORCE_FRAMEWORK_ENVIRONMENT);
-    const appPublishedData = await this.getAppPublished(appId);
-    const appInfo = appPublishedData?.app_info ?? null;
     req.__platform_data__ = {
       csrfToken: csrfToken ?? "",
       userId: userId ?? "",
@@ -34636,9 +34635,7 @@ var ViewContextMiddleware = class _ViewContextMiddleware {
       loginUrl: loginUrl ?? "",
       userType: userType ?? "",
       tenantId,
-      environment,
-      showBadge: appInfo?.show_badge !== false,
-      appPublished: appPublishedData ?? null
+      environment
     };
     res.locals = {
       ...res.locals ?? {},
@@ -34749,18 +34746,24 @@ function createApiNotFoundResponse(req) {
   };
 }
 __name(createApiNotFoundResponse, "createApiNotFoundResponse");
-function getApiPathPrefix() {
+function getApiPathPrefixes() {
   const globalPrefix = process.env.CLIENT_BASE_PATH ?? "";
   if (!globalPrefix) {
-    return "/api/";
+    return [
+      "/api/",
+      "/openapi/"
+    ];
   }
   const normalizedPrefix = globalPrefix.replace(/\/+$/, "");
-  return `${normalizedPrefix}/api/`;
+  return [
+    `${normalizedPrefix}/api/`,
+    `${normalizedPrefix}/openapi/`
+  ];
 }
-__name(getApiPathPrefix, "getApiPathPrefix");
+__name(getApiPathPrefixes, "getApiPathPrefixes");
 function apiResponseInterceptor(req, res, next) {
-  const apiPrefix = getApiPathPrefix();
-  if (!req.baseUrl.startsWith(apiPrefix)) {
+  const apiPrefixes = getApiPathPrefixes();
+  if (!apiPrefixes.some((prefix) => req.baseUrl.startsWith(prefix))) {
     return next();
   }
   res.render = function() {
@@ -34990,17 +34993,141 @@ FrameworkDebugMiddleware = _ts_decorate7([
   ])
 ], FrameworkDebugMiddleware);
 
+// src/middlewares/openapi-spec/index.ts
+import { SwaggerModule, DocumentBuilder } from "@nestjs/swagger";
+import { Injectable as Injectable8 } from "@nestjs/common";
+function _ts_decorate8(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+  else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+__name(_ts_decorate8, "_ts_decorate");
+var _app = null;
+var _cachedSpec = null;
+function registerOpenApiSpecEndpoint(app) {
+  const globalPrefix = (process.env.CLIENT_BASE_PATH ?? "").replace(/\/+$/, "");
+  _app = app;
+  console.log(`[OpenAPI] Registered GET ${globalPrefix}/api/__framework__/openapi-spec`);
+}
+__name(registerOpenApiSpecEndpoint, "registerOpenApiSpecEndpoint");
+var OpenApiSpecMiddleware = class {
+  static {
+    __name(this, "OpenApiSpecMiddleware");
+  }
+  use(_req, res, next) {
+    if (!_app) {
+      next();
+      return;
+    }
+    try {
+      if (!_cachedSpec) {
+        const globalPrefix = (process.env.CLIENT_BASE_PATH ?? "").replace(/\/+$/, "");
+        const config = new DocumentBuilder().setTitle("OpenAPI Spec").setVersion("1.0").build();
+        const spec = SwaggerModule.createDocument(_app, config);
+        _cachedSpec = buildFilteredSpec(spec, globalPrefix);
+      }
+      res.json(_cachedSpec);
+    } catch (err) {
+      console.error("[openapi-spec] Failed to generate spec:", err);
+      res.json({
+        openapi: "3.0.0",
+        paths: {},
+        components: {
+          schemas: {}
+        }
+      });
+    }
+  }
+};
+OpenApiSpecMiddleware = _ts_decorate8([
+  Injectable8()
+], OpenApiSpecMiddleware);
+function buildFilteredSpec(spec, globalPrefix) {
+  const schemas = spec.components?.schemas ?? {};
+  const paths = spec.paths ?? {};
+  const filteredPaths = {};
+  for (const [pathKey, methods] of Object.entries(paths)) {
+    const cleanPath = stripPrefix(pathKey, globalPrefix);
+    if (!cleanPath.startsWith("/openapi")) continue;
+    filteredPaths[cleanPath] = {};
+    for (const [method, operation] of Object.entries(methods)) {
+      if ([
+        "parameters",
+        "summary",
+        "description",
+        "servers"
+      ].includes(method)) continue;
+      filteredPaths[cleanPath][method] = resolveRefsDeep(structuredClone(operation), schemas);
+    }
+  }
+  return {
+    openapi: spec.openapi,
+    paths: filteredPaths,
+    components: {
+      schemas: resolveAllSchemaRefs(structuredClone(schemas))
+    }
+  };
+}
+__name(buildFilteredSpec, "buildFilteredSpec");
+function stripPrefix(path2, prefix) {
+  if (prefix && path2.startsWith(prefix)) {
+    return path2.slice(prefix.length);
+  }
+  return path2;
+}
+__name(stripPrefix, "stripPrefix");
+var MAX_REF_DEPTH = 5;
+function resolveRefsDeep(obj, schemas, depth = 0) {
+  if (depth > MAX_REF_DEPTH || obj === null || obj === void 0) return obj;
+  if (typeof obj !== "object") return obj;
+  if (Array.isArray(obj)) {
+    return obj.map((item) => resolveRefsDeep(item, schemas, depth));
+  }
+  const record = obj;
+  if (typeof record["$ref"] === "string") {
+    const resolved = resolveRef(record["$ref"], schemas);
+    if (resolved !== void 0) {
+      return resolveRefsDeep(structuredClone(resolved), schemas, depth + 1);
+    }
+    return record;
+  }
+  const result = {};
+  for (const [key, value] of Object.entries(record)) {
+    result[key] = resolveRefsDeep(value, schemas, depth);
+  }
+  return result;
+}
+__name(resolveRefsDeep, "resolveRefsDeep");
+function resolveRef(ref, schemas) {
+  const prefix = "#/components/schemas/";
+  if (ref.startsWith(prefix)) {
+    const name = ref.slice(prefix.length);
+    return schemas[name];
+  }
+  return void 0;
+}
+__name(resolveRef, "resolveRef");
+function resolveAllSchemaRefs(schemas) {
+  const result = {};
+  for (const [name, schema] of Object.entries(schemas)) {
+    result[name] = resolveRefsDeep(schema, schemas);
+  }
+  return result;
+}
+__name(resolveAllSchemaRefs, "resolveAllSchemaRefs");
+
 // src/services/platform-http-client.service.ts
-import { Injectable as Injectable8, Logger as Logger2 } from "@nestjs/common";
+import { Injectable as Injectable9, Logger as Logger2 } from "@nestjs/common";
 import { HttpClient } from "@lark-apaas/http-client";
 import { RequestContextService as RequestContextService2 } from "@lark-apaas/nestjs-common";
-function _ts_decorate8(decorators, target, key, desc) {
+function _ts_decorate9(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate8, "_ts_decorate");
+__name(_ts_decorate9, "_ts_decorate");
 function _ts_metadata5(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
@@ -35195,8 +35322,8 @@ var PlatformHttpClientService = class _PlatformHttpClientService {
     });
   }
 };
-PlatformHttpClientService = _ts_decorate8([
-  Injectable8(),
+PlatformHttpClientService = _ts_decorate9([
+  Injectable9(),
   _ts_metadata5("design:type", Function),
   _ts_metadata5("design:paramtypes", [
     typeof RequestContextService2 === "undefined" ? Object : RequestContextService2
@@ -35207,16 +35334,16 @@ PlatformHttpClientService = _ts_decorate8([
 var DISABLE_DATAPASS = process.env.FORCE_FRAMEWORK_DISABLE_DATAPASS === "true";
 
 // src/services/file.service.ts
-import { Injectable as Injectable9, Inject as Inject2, Logger as Logger3 } from "@nestjs/common";
+import { Injectable as Injectable10, Inject as Inject2, Logger as Logger3 } from "@nestjs/common";
 import { ObservableService, RequestContextService as RequestContextService3, PLATFORM_HTTP_CLIENT as PLATFORM_HTTP_CLIENT2, OBSERVABLE_SERVICE } from "@lark-apaas/nestjs-common";
 import { FileService as FileServiceCore, FileDownloadBuilder } from "@lark-apaas/file-service";
-function _ts_decorate9(decorators, target, key, desc) {
+function _ts_decorate10(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate9, "_ts_decorate");
+__name(_ts_decorate10, "_ts_decorate");
 function _ts_metadata6(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
@@ -35581,8 +35708,8 @@ var FileService = class {
     }
   }
 };
-FileService = _ts_decorate9([
-  Injectable9(),
+FileService = _ts_decorate10([
+  Injectable10(),
   _ts_param2(1, Inject2(PLATFORM_HTTP_CLIENT2)),
   _ts_param2(2, Inject2(OBSERVABLE_SERVICE)),
   _ts_metadata6("design:type", Function),
@@ -35605,13 +35732,13 @@ import { ApiExcludeController } from "@nestjs/swagger";
 import * as fs from "fs";
 import * as path from "path";
 import * as crypto2 from "crypto";
-function _ts_decorate10(decorators, target, key, desc) {
+function _ts_decorate11(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate10, "_ts_decorate");
+__name(_ts_decorate11, "_ts_decorate");
 function _ts_metadata7(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
@@ -35764,7 +35891,7 @@ var StaticController = class _StaticController {
     }
   }
 };
-_ts_decorate10([
+_ts_decorate11([
   Get("*"),
   _ts_param3(0, Param()),
   _ts_param3(1, Req()),
@@ -35777,7 +35904,7 @@ _ts_decorate10([
   ]),
   _ts_metadata7("design:returntype", void 0)
 ], StaticController.prototype, "serveFile", null);
-StaticController = _ts_decorate10([
+StaticController = _ts_decorate11([
   ApiExcludeController(),
   Controller("static"),
   _ts_metadata7("design:type", Function),
@@ -35785,19 +35912,19 @@ StaticController = _ts_decorate10([
 ], StaticController);
 
 // src/modules/static/static.module.ts
-function _ts_decorate11(decorators, target, key, desc) {
+function _ts_decorate12(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate11, "_ts_decorate");
+__name(_ts_decorate12, "_ts_decorate");
 var StaticModule = class {
   static {
     __name(this, "StaticModule");
   }
 };
-StaticModule = _ts_decorate11([
+StaticModule = _ts_decorate12([
   Module({
     controllers: [
       StaticController
@@ -35813,7 +35940,7 @@ import { Controller as Controller2, Post, Body, HttpCode, HttpStatus as HttpStat
 import { ApiExcludeController as ApiExcludeController2 } from "@nestjs/swagger";
 
 // src/modules/html-hot-update/html-hot-update.service.ts
-import { Injectable as Injectable10, Logger as Logger5, Inject as Inject3 } from "@nestjs/common";
+import { Injectable as Injectable11, Logger as Logger5, Inject as Inject3 } from "@nestjs/common";
 import { promises as fs2 } from "fs";
 import { existsSync as existsSync2 } from "fs";
 import { createHash as createHash2 } from "crypto";
@@ -35846,13 +35973,13 @@ function setActiveHtmlVersion(version) {
 __name(setActiveHtmlVersion, "setActiveHtmlVersion");
 
 // src/modules/html-hot-update/html-hot-update.service.ts
-function _ts_decorate12(decorators, target, key, desc) {
+function _ts_decorate13(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate12, "_ts_decorate");
+__name(_ts_decorate13, "_ts_decorate");
 function _ts_metadata8(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
@@ -36097,8 +36224,8 @@ var HtmlHotUpdateService = class _HtmlHotUpdateService {
     return "";
   }
 };
-HtmlHotUpdateService = _ts_decorate12([
-  Injectable10(),
+HtmlHotUpdateService = _ts_decorate13([
+  Injectable11(),
   _ts_param4(0, Inject3(PLATFORM_HTTP_CLIENT3)),
   _ts_metadata8("design:type", Function),
   _ts_metadata8("design:paramtypes", [
@@ -36107,13 +36234,13 @@ HtmlHotUpdateService = _ts_decorate12([
 ], HtmlHotUpdateService);
 
 // src/modules/html-hot-update/html-hot-update.controller.ts
-function _ts_decorate13(decorators, target, key, desc) {
+function _ts_decorate14(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate13, "_ts_decorate");
+__name(_ts_decorate14, "_ts_decorate");
 function _ts_metadata9(k, v) {
   if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
 }
@@ -36178,7 +36305,7 @@ var HtmlHotUpdateController = class _HtmlHotUpdateController {
     }
   }
 };
-_ts_decorate13([
+_ts_decorate14([
   Post("update_html_files"),
   HttpCode(HttpStatus2.OK),
   _ts_param5(0, Body()),
@@ -36188,7 +36315,7 @@ _ts_decorate13([
   ]),
   _ts_metadata9("design:returntype", Promise)
 ], HtmlHotUpdateController.prototype, "updateHtmlFiles", null);
-HtmlHotUpdateController = _ts_decorate13([
+HtmlHotUpdateController = _ts_decorate14([
   ApiExcludeController2(),
   Controller2("__innerapi__"),
   _ts_metadata9("design:type", Function),
@@ -36198,19 +36325,19 @@ HtmlHotUpdateController = _ts_decorate13([
 ], HtmlHotUpdateController);
 
 // src/modules/html-hot-update/html-hot-update.module.ts
-function _ts_decorate14(decorators, target, key, desc) {
+function _ts_decorate15(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate14, "_ts_decorate");
+__name(_ts_decorate15, "_ts_decorate");
 var HtmlHotUpdateModule = class {
   static {
     __name(this, "HtmlHotUpdateModule");
   }
 };
-HtmlHotUpdateModule = _ts_decorate14([
+HtmlHotUpdateModule = _ts_decorate15([
   Module2({
     controllers: [
       HtmlHotUpdateController
@@ -36225,16 +36352,16 @@ HtmlHotUpdateModule = _ts_decorate14([
 ], HtmlHotUpdateModule);
 
 // src/middlewares/html-hot-update-view/index.ts
-import { Injectable as Injectable11 } from "@nestjs/common";
+import { Injectable as Injectable12 } from "@nestjs/common";
 import { existsSync as existsSync3 } from "fs";
 import { join as join4 } from "path";
-function _ts_decorate15(decorators, target, key, desc) {
+function _ts_decorate16(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate15, "_ts_decorate");
+__name(_ts_decorate16, "_ts_decorate");
 var HtmlHotUpdateViewMiddleware = class {
   static {
     __name(this, "HtmlHotUpdateViewMiddleware");
@@ -36261,18 +36388,18 @@ var HtmlHotUpdateViewMiddleware = class {
     next();
   }
 };
-HtmlHotUpdateViewMiddleware = _ts_decorate15([
-  Injectable11()
+HtmlHotUpdateViewMiddleware = _ts_decorate16([
+  Injectable12()
 ], HtmlHotUpdateViewMiddleware);
 
 // src/modules/platform/module.ts
-function _ts_decorate16(decorators, target, key, desc) {
+function _ts_decorate17(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-__name(_ts_decorate16, "_ts_decorate");
+__name(_ts_decorate17, "_ts_decorate");
 var PLATFORM_MODULE_OPTIONS = /* @__PURE__ */ Symbol("PLATFORM_MODULE_OPTIONS");
 var PlatformModule = class _PlatformModule {
   static {
@@ -36413,16 +36540,21 @@ var PlatformModule = class _PlatformModule {
   */
   configure(consumer) {
     const options = _PlatformModule.moduleOptions;
-    consumer.apply(apiResponseInterceptor).forRoutes("/api/*");
+    consumer.apply(apiResponseInterceptor).forRoutes("/api/*", "/openapi/*");
     if (process.env.NODE_ENV === "development") {
       consumer.apply(FrameworkDebugMiddleware).forRoutes("/api/__framework__/debug");
     }
+    if (process.env.NODE_ENV !== "production") {
+      consumer.apply(OpenApiSpecMiddleware).forRoutes("/api/__framework__/openapi-spec");
+    }
     consumer.apply(UserContextMiddleware, RequestContextMiddleware, LoggerContextMiddleware, ObservableTraceMiddleware, ...DISABLE_DATAPASS ? [] : [
       SqlExecutionContextMiddleware
     ]).forRoutes("/*");
-    consumer.apply(CsrfTokenMiddleware, ViewContextMiddleware, HtmlHotUpdateViewMiddleware).exclude("/api/(.*)", "/static/(.*)").forRoutes("*");
+    consumer.apply(CsrfTokenMiddleware, ViewContextMiddleware, HtmlHotUpdateViewMiddleware).exclude("/api/(.*)", "/openapi/(.*)", "/static/(.*)").forRoutes("*");
     if (options.enableCsrf !== false) {
-      const csrfRoutes = options.csrfRoutes || "/api/*";
+      const csrfRoutes = options.csrfRoutes || [
+        "/api/*"
+      ];
       if (Array.isArray(csrfRoutes)) {
         csrfRoutes.forEach((route) => {
           consumer.apply(CsrfMiddleware).forRoutes(route);
@@ -36433,7 +36565,7 @@ var PlatformModule = class _PlatformModule {
     }
   }
 };
-PlatformModule = _ts_decorate16([
+PlatformModule = _ts_decorate17([
   Global(),
   Module3({})
 ], PlatformModule);
@@ -36511,6 +36643,9 @@ async function configureApp(app, perms = defaultPerms) {
       console.error("[OpenAPI] OpenAPI \u751F\u6210\u5931\u8D25:", err);
     }
   }
+  if (process.env.NODE_ENV !== "production") {
+    registerOpenApiSpecEndpoint(app);
+  }
   console.log("App Started Successfully.");
 }
 __name(configureApp, "configureApp");
@@ -36545,7 +36680,8 @@ export {
   UserContextMiddleware,
   ViewContextMiddleware,
   configureApp,
-  createLegacyPathRedirectMiddleware
+  createLegacyPathRedirectMiddleware,
+  registerOpenApiSpecEndpoint
 };
 /*! Bundled license information:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lark-apaas/fullstack-nestjs-core",
-  "version": "1.1.34-alpha.64",
+  "version": "1.1.34-alpha.66",
   "description": "FullStack Nestjs Core",
   "type": "module",
   "main": "./dist/index.js",
@@ -45,7 +45,7 @@
     "@lark-apaas/nestjs-authzpaas": "^0.1.8",
     "@lark-apaas/nestjs-capability": "^0.1.11",
     "@lark-apaas/nestjs-common": "^0.1.8",
-    "@lark-apaas/nestjs-datapaas": "^1.0.19",
+    "@lark-apaas/nestjs-datapaas": "^1.0.18",
     "@lark-apaas/nestjs-logger": "^1.0.16",
     "@lark-apaas/nestjs-observable": "^0.0.11",
     "@lark-apaas/nestjs-openapi-devtools": "^1.0.10",